Latest / Wpfavs - Your favourite WordPress news / WordPress Plugins Meet AI, Permissions, and Ecosystem Turbulence
Transcript
- 0:13If I see one more plugin clutter my dashboard with a giant promo banner and six
- 0:17submenus, I, I, I might actually lose my mind.
- 0:20Nobody is clicking those anymore!
- 0:22Uh, amen to that.
- 0:23In late 2026, if your plugin relies on a human spending twenty minutes clicking
- 0:28around wp admin, you've already lost.
- 0:30Right, because site managers are using terminal agents and AI clients to do the work
- 0:35now.
- 0:35It is all about how easy you make it for an AI assistant to read and edit your site.
- 0:40And that is exactly why the WPCodeBox 1.4.0 update is a complete game changer.
- 0:46They added native Model Context Protocol access, but they built it with a real
- 0:50permission ladder.
- 0:51Wait, what do you mean by a permission ladder?
- 0:53So, by default, the MCP tools are strictly read only.
- 0:57An AI agent can inspect your snippets, but if it wants to write code or execute PHP,
- 1:03an administrator has to explicitly opt in.
- 1:06It, it, it draws a clean line between discovery and execution.
- 1:10That is huge for AI visibility and safety.
- 1:13And look at wpDataTables 8.0 with their AI First update.
- 1:17They exposed REST API endpoints and direct MCP integrations so agents like Angie can
- 1:22just query your database tables or generate SQL directly.
- 1:26Yeah!
- 1:27You do not even touch the table builder UI anymore.
- 1:30The AI asks for the schema, gets the endpoint, and renders the chart.
- 1:34It is seamless.
- 1:35Hold on though.
- 1:36Seamless is great, but SEOPress 10.2 just added an AI assistant step right into
- 1:41their initial setup wizard, and I am a little skeptical.
- 1:44Skeptical?
- 1:45Why?
- 1:46Lowering friction during onboarding is how you get people to actually use these AI
- 1:50capabilities!
- 1:51Because prompt shortcuts during setup can lead to accidental write permissions
- 1:55before a site owner even understands what data the agent can modify!
- 1:59We need guardrails, not just instant access.
- 2:02It is that balance between friction free AI discovery and tight server governance.
- 2:07But speaking of governance...
- 2:08We have to talk about what just happened on the ecosystem side.
- 2:12The governance landscape is shifting under our feet.
- 2:14Oh man.
- 2:15You mean the news from 404Media?
- 2:17Exactly.
- 2:18Samantha Cole from 404Media reported that Automattic CEO Matt Mullenweg was put on a
- 2:23Leave of Absence from Automattic.
- 2:25Yeah, and right after that news broke, Matt was publicly posting hiring calls to
- 2:29migrate core infrastructure off Automattic servers.
- 2:33I mean, talk about volatility at the very top.
- 2:35It is wild, but what impresses me is how the core developer community is responding.
- 2:41Look at David Perez proposing automated security reviews for all official repository
- 2:46releases.
- 2:46Right.
- 2:48While executive leadership is in turmoil, the technical foundation in the WordPress
- 2:527.1.1 cycle is actually hardening.
- 2:55So here is my question for you, Nick.
- 2:57Given all this instability, should plugin creators and agencies be actively
- 3:01decoupling their tools from Automattic adjacent services entirely?
- 3:05I think smart buyers already are.
- 3:07In 2026, serious agencies are moving away from fragile, unmaintained utility
- 3:12scripts.
- 3:13They are putting their money into deeply maintained, self contained,
- 3:17zero trust platforms like Melapress for security or FluentCart for commerce.
- 3:22Because when the ecosystem shakes, you want software that owns its entire stack and
- 3:26exposes clear, secure APIs.
- 3:28Precisely.
- 3:29Clean code, strict permissions, and zero external drama.
- 3:32That is how you win today.
- 3:33Well, on that note, let us keep building.
- 3:35Good chat, guys.
- 3:36Talk soon, everyone.